On Tue, 12 Feb 2008, Matthew Rogers wrote:
> Eben King wrote:
>> Something's using up CPU time on my machine, but nothing shows in top nor
>> gkrellm's strip charts, nor does any unusual network use show up in
>> gkrellm. But bash and trn take seconds to start and exit, and the CPU speed
>> is a constant 2.4G (normally it falls back when nothing's happening). How
>> can I find out what it is? I can get network bandwidth from the
>> internet-facing router for everyone combined (which is mostly me), for
>> periods from 1m - 5h.
> sar 5 5
eben@pc:~$ sar 5 5
-bash: sar: command not found
> will give all sort of information. Sounds like you are rooted and have
> become a spam bot. Do a netstat and see how many out going connections you
> have going at once. netstat -ta.
I see a bunch of connections like these:
tcp 1 1 pc:36973 77.247.176.136:www LAST_ACK
tcp 1 1 pc:40262 77.247.176.154:www LAST_ACK
tcp 1 1 pc:35394 77.247.176.136:www LAST_ACK
tcp 1 1 pc:35507 77.247.176.136:www LAST_ACK
etc.
eben@pc:~$ host 77.247.176.136
Host 136.176.247.77.in-addr.arpa not found: 3(NXDOMAIN)
eben@pc:~$ host 77.247.176.154
Host 154.176.247.77.in-addr.arpa not found: 3(NXDOMAIN)
That's probably something to do with the torrents. How do I make the system
break protocol and forget those connections? "ifdown eth0 ; ifup eth0"
doesn't do it.
There aren't that many active connections, and none of them are to
mail-related ports:
eben@pc:~$ netstat -ta | grep EST (minus the ones for gaim)
tcp 0 48 pc:36111 CPE0002a557ac9a-C:11219 ESTABLISHED
tcp 0 0 pc:50457 bas1-toronto43-12:13765 ESTABLISHED
tcp 0 28290 pc:36116 ABTS-TN-dynamic-0:39600 ESTABLISHED
tcp 0 17 pc:43343 59.96.137.124:13598 ESTABLISHED
In fact if I quit bittorrent, they all go away.
-- -eben QebWenE01R@vTerYizUonI.nOetP http://royalty.mine.nu:81 CAPRICORN: The stars say you're an exciting and wonderful person... but you know they're lying. If I were you, I'd lock my doors and windows and never never never never never leave my house again. -- Weird Al ----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 15:00:17 EDT